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© Network server for local and remote resources. 


© A network server permits clients on the network 
to access one or more local resources managed by 
the network server and one or more remote re- 
sources managed by one or more respective remote 
computers coupled to the network server. When a 
client desires to access any of the resources, the 
client first requests a session or log-on to the net- 
work server by supplying a valid account name and 
password. Either with the session establishment re- 

9 quest or subsequently during the same session, the 
client requests a connection or access to a resource. 
The client need not know the location of the re- 
00 source or the computer (remote or network server) 
CO which manages the resource. The network server 
q determines which computer manages the requested 

rs 


resource. If the network server manages the re- 
source, then the network server determines if the 
connection is available or provides the access as 
requested and responds to the client. Then, if the 
client subsequently requests a connection with or 
access to a resource managed by a remote com- 
puter, or if the original request was for a resource 
managed by the remote computer, the network serv- 
er sends a session establishment request and con- 
nect or access request to the remote computer. The 
client need not send a separate session establish- 
ment request for the remote computer. If the remote 
computer grants the session, then the client can 
access the resource managed by the remote com- 
puter. 
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The invention relates generally to computer 
networks, and deals more particularly with a net- 
work server that permits a network client to access 
a local resource coupled directly to the network 
server and a remote resource coupled to a host 
computer. 

A previously known local area network (LAN) is 
used to interconnect multiple personal computers 
or work stations, called "clients", and a network 
server. The network server comprises a personal 
computer and a program which provides a variety 
of services to the clients. For example, the server 
manages a local disk (DASD) and permits selected 
(or all) clients on the LAN to access the disk. Also, 
the server may provide access by LAN clients to a 
local printer that the server manages. To access 
the local disk, the client must first establish a 
session or "log-on" to the server with a valid ac- 
count and password and request a connection to 
the local disk. In response, the server validates the 
account and password, and grants the connection if 
available. Then, the client requests a remote file 
operation (e.g. open, read, write, close) and fur- 
nishes associated parameters. In response, the 
server may copy (depending on the operation) the 
file from the local disk into RAM, and performs the 
operation requested by the client. If the file is 
updated, the server will copy the updated version 
back to the local disk, overwriting the previous 
version. 

A previously known IBM LANRES/VM com- 
puter system comprises a LAN, a network server 
and a remote disk driver (with a remote disk) 
coupled to the network server. The remote disk 
driver is in the form of a System/370 host com- 
puter; however, the System/370 computer is not 
used as a computer for service to the network 
server, but merely as a disk driver for the remote 
disk. The network server maintains a list of all 
resources that the network server can access, i.e. 
the local disk, the remote disk, all directories on 
the local disk and all directories on the remote 
disk, and a table or pointers to map each directory 
and file within the directory to the storage location 
on the corresponding disk. The clients do not know 
where the requested resource resides. To access 
any of the resources, a client on the LAN must 
establish a session with or log-on to the network 
server with a valid account and password, request 
a connection to a named resource and provide a 
remote file operation/command and associated pa- 
rameters. In response, the network server validates 
the account and password, determines the location 
of the named resource and then translates the 
directory name into specific addresses on the disk. 
If the fife is located on the local disk, then the 
network server fetches the directory from the ad- 
dresses and then performs the operation requested 


by the client. (The client may subsequently request 
access to a file within the directory.) If the file is 
located on the remote disk, then the server pro- 
vides to the remote disk driver the specific ad- 

5 dresses of the directory on the remote disk to be 
written to or read from and the write or read 
command. It should be noted that the network 
server cannot address the remote disk by a direc- 
tory (or file) name, and the disk driver does not 

10 provide the security associated with a log-on re- 
quirement. Also, because the data cannot be ac- 
cessed by a directory (or file) name or as any 
discernible entity, it is not possible for another 
application program which executes on the 

75 System/370 computer to access the directory or 
file; this other application program does not know 
the location of the directory or file. Nevertheless, 
there is an important advantage to this 
LANRES/VM computer system. As noted above, 

20 the client need not know the actual location of the 
disk; the disk can be local to the network server or 
connected to the remote disk driver. In this respect, 
the server is "transparent" to the client. 

A general object of the present invention is to 

25 provide a network server which permits a client on 
a network to access a local resource managed by 
the network server and a remote resource man- 
aged by a host computer, which host computer 
provides host computer services relating to the 

30 remote resource. 

Another object of the present invention is to 
provide a network server of the foregoing type 
which permits a client to access both a local re- 
source and a remote resource without knowing the 

35 location of either. 

Still another object of the present invention is 
to provide a network server of the foregoing type 
which permits an application program executing on 
the host computer to access the same directories 

40 and files on the remote resource that the clients 
can access. 

A more specific object of the present invention 
is to provide a network server of the foregoing type 
in which the host computer provides security for 
45 the remote resource. 

Another specific object of the present invention 
is to provide a network server of the foregoing type 
which permits a client to access remote resources 
managed by different host computers, and to do so 
so efficiently. 

These and other objects are solved advanta- 
geously by the invention as claimed. 

The invention resides in a network server that 
permits clients on the network to access one or 
55 more local resources managed by the network 
server and one or more remote resources man- 
aged by one or more respective remote computers 
coupled to the network server. 
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When a client desires to access any of the 
resources, the client first requests a session or log- 
on to the network server by supplying an account 
name and/or password. If the account name and/or 
password are valid, the network server establishes 
a session with the client. Either with the session 
establishment request or subsequently during the 
same session, the client requests a connection or 
access to a resource. The client need not know the 
location of the resource or the computer (remote or 
network server) which manages the resource, and 
does not specify the location in the request. The 
network server determines which computer man- 
ages the requested resource. If the network server 
manages the resource, then the network server 
determines if the connection is available or pro- 
vides the access as requested and responds to the 
client. Then, if the client subsequently requests a 
connection with or access to a resource managed 
by a remote computer, or if the original request 
was for a resource managed by the remote com- 
puter, the network server sends a session estab- 
lishment request and connect or access request to 
the remote computer. The client need not send a 
separate session establishment request for the re- 
mote computer. The remote computer then accepts 
or rejects the session establishment request based 
on security information stored in the remote com- 
puter for this client. If the session with the remote 
computer is established, then the client can access 
the resource managed by the remote computer. 
For efficiency, the other remote computers are not 
informed of the session or otherwise interrupted. 

According to one feature of the present inven- 
tion, an application program executing on the host 
computer can also access the same remote re- 
source managed by the host computer that the 
clients can access. 

The invention will be described in more detail 
by the following description in connection with em- 
bodiments shown in the drawing in which: 

Fig. 1 is a block diagram of a network server 
according to the present invention, a local 
DASD, a network of clients which can access 
the local DASD via the network server, and 
remote computers coupled to the network serv- 
er. Fig. 1 also illustrates remote DASDs which 
are managed by the remote computers and 
which the clients can access via the network 
server. 

Figs. 2(a) and 2(b) are flow charts illustrating 
general operation of a back end service program 
within the network server of Fig. 1. 
Figs. 3(a-d) form a flow chart illustrating exam- 
ples of operation of the network server and host 
computers of Fig. 1 in response to specific 
requests by the clients. 


Figs. 4(a) and 4(b) form a flow chart illustrating 
other examples of operation of the network serv- 
er and host computers of Fig. 1 in response to 
other specific requests by the clients. 

s Figs. 5(a) and 5(b) form a flow chart illustrating 
still other examples of operation of the network 
server and host computers of Fig. 1 in response 
to still other specific requests by the clients. 
Fig. 6 is a block diagram illustrating a PCA 

10 adapter card within the network server of Fig. 1. 

Detailed Description of Embodiments 

Referring now to the drawings in detail wherein 

75 like reference numerals indicate like elements 
throughout the several views, Fig. 1 illustrates a 
computer network generally designated 10 which 
includes many previously known clients 11a-z 
coupled together by a previously known commu- 

20 nication link 12 to form a LAN 13, and a network 
server 14 according to the present invention. By 
way of example, each of the clients comprises a 
personal computer or a workstation which executes 
a DOS Lan Requestor, OS/2 LAN Requestor, PC 

25 LAN Program or LANMAN For DOS client program, 
and a Token-Ring or Ethernet adapter card to inter- 
face the personal computer or workstation to the 
other clients and the network server via the com- 
munication link. The network server 1 4 comprises a 

30 previously known personal computer such as an 
IBM PS/2 personal computer with a processor 18 
(although the network server could also execute in 
a multiprocessor environment), an OS/2 operating 
system 20, a DASD controller 22 for local DASD 

35 24, and a Token-Ring or Ethernet adapter card. For 
further details of the PS/2 computer, reference can 
be made to the following document which is avail- 
able from International Business Machines Corp. in 
Mechanicsburg, Pennsylvania: "IBM PS/2 Refer- 

40 ence Guide", G360-2669. The network server 14 
also comprises a previously known parallel channel 
adapter (PCA) card 28 to permit the network server 
to communicate with a host computer 30 via an 
associated channel 32, and with a host computer 

45 34 via an associated channel 36. By way of exam- 
ple, each of the host computers comprises a pre- 
viously known IBM System/370 or System/390 
computer and each of the channels comprises an 
IBM Block Multiplexor channel. The host comput- 

50 ers 30 and 34 provide basic computer functions 
such as security and management of respective 
DASDs 40 and 44. For further details of the host 
computers 30 and 34 and channels 32 and 36, 
reference can be made to the following documents 

55 which are available from International Business Ma- 
chines Corp. in Mechanicsburg, Pennsylvania: " 
System/370 Principles of Operation" publication 
number GA22-7000, and "ESA/390 Principles of 


4 


5 


EP 0 570 683 A2 


6 


Operation" publication number SA22-7201. 

Figs. 2(a) and (b) illustrate operation of network 
server 14 according to the present invention to 
permit any of the clients Ha-z to access the local 
DASD 24, remote DASD 40 and remote DASD 44. 
When a client 11a-z is initiated or subsequently 
when the client desires to access a directory or file 
on local DASD 24, remote DASD 40 or remote 
DASD 42, the client requests a session with or log- 
on to the network server 14. This request involves 
registration and authentication of an account name 
for the client, and requires a valid account name, 
password and other parameters as follows: 

Client Maximum Buffer Size 

Actual Maximum Multiplexed Pending Re- 
quests 

Virtual Circuit Number - when a client estab- 
lishes a communications link with a network server, 
that link is given a number to identify it uniquely. 
This is that number. 

Session Key 

Account Password Length 
Account Password 
Account Name 

Consumer Maximum Buffer Size 

At the time of making the session establish- 
ment request or subsequently, the client may re- 
quest a connection to a resource such as a direc- 
tory by name. However, the client could have re- 
quested a connection to other types of resources, 
for example, an entire data repository such as one 
of the DASDs, a part of a data repository such as a 
minidisk, a printer (not shown), or another data 
entity such as a file. The connect request is a 
request to determine if the resource is available 
and if the requestor is authorized to access the 
resource. The client need not know the location of 
the resource or which computer 14, 30 or 34 man- 
ages the resource. The connect request usually 
precedes another command to actually read from 
or write to the resource. By way of example, all 
requests from the clients use a server message 
block (SMB) or Network File System (NFS) Remote 
Procedure Call (RPC) protocol, which are further 
defined in documents entitled "Microsoft 
Networks/OpenNET File Sharing Protocol", Intel 
Part Number 138446 Version 1.9, 04/21/87, Micro- 
soft Corporation, Intel Corporation; "Microsoft Net- 
works SMB FILE SHARING PROTOCOL EXTEN- 
SIONS: SMB File Sharing Protocol Extensions Ver- 
sion 2.0", Document Version 3.2, 07/13/88, Micro- 
soft Corporation; and "Microsoft Networks SMB 
FILE SHARING PROTOCOL EXTENSIONS: SMB 
File Sharing Protocol Extensions Version 3.0", Doc- 
ument Version 1.09, 11/29/89, Microsoft Corpora- 
tion for SMB Protocol, and Internet RFC 1057, Sun 
Microsystems, Inc., June 1988 for NFS Protocol. 


A network interface 52 within network server 14 
receives the request(s), associates the request with 
the appropriate client and session, determines the 
correct process to receive the request, and then 

5 passes the request(s) to a front end service pro- 
gram 53. The front end service program passes 
this request(s) (and all client requests), without 
change, to a back end service program 60. (The 
front end service program and back end service 

10 program are both executed by processor 18 after 
being loaded or read from a magnetic disk or tape 
into RAM 103). When the back end service pro- 
gram receives the request (step 104), the back end 
service program determines if the request includes 

75 a session establishment . request (decision block 
106). if so, the back end service stores in a session 
establishment data table 54 the foregoing informa- 
tion from the client request and the following in- 
formation which the front end service and the back 

20 end service generate (step 110): 

(Front end Service Generated) 

Session Structure Pointer - when a client ses- 
25 sion establishment requests is received by a net- 
work server, the network server associates this 
request with a control block of information about 
that client. This field is the address of that control 
block. Once the session is established, the network 
30 server sets a bit to indicate that this session is 
active. 

Session Encryption Key Length 
Session Encryption Key 
Remote Client Name Length - the length of the 
35 remote client name. 

Remote Client Name - this is the address of a 
block of storage that contains the machine name of 
the client that has/is attempting to establish a ses- 
sion with this network server. This address comes 
40 from the session structure. 

(Back End Service Generated) 

Account Name Length 
45 Session Next Pointer - next instance of this 

structure based on session structure pointer - 
linked list. 

Session Previous Pointer 

Structure Next Pointer - next instance of this 
so structure for any session - linked list. 

Structure Previous Pointer 

Structure Flags 
This information forms a client control block. 

Next, the back end service determines if the 
55 request includes a connect request, and if so, is 
the resource for which connection is requested 
stored within a remote DASD (or other external 
device) managed by either host computer 30 or 34 
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(decision block 112). The latter determination is 
made by reading a resource table 56 to identify the 
location of the DASD or other external device that 
stores the file. If there is no such request to con- 
nect to resource managed by either remote DASD 
40 or 44, then the back end service returns the 
client request to the front end service for process- 
ing. The front end service then determines if the 
account and password are valid by comparing 
them to lists of valid accounts and passwords, 
respectively. If the account and password are valid, 
the front end service establishes a session with the 
client by setting a flag in the session structure 
pointer field in the control blocks. Then the front 
end service notes the existence of the session in 
an active session table 57 and returns a session 
establishment acknowledgement to the client via 
the network interface and to the back end service 
(step 116). If the request also includes a connect 
request for a resource managed by the network 
server such as a directory stored in local DASD 24, 
then the front end service also checks the status of 
the connection, and reports the outcome to the 
client. If the password is not valid, or if the session 
cannot be established for some other reason (such 
as a limit on the number of sessions allocated to 
each resource), then the front end service returns a 
session refusal message to the client (step 1 1 6). 

Referring again to decision block 112, if the 
client request includes a request to connect to a 
resource managed by remote computer 30 or re- 
mote computer 34 such as remote DASD 40 or 
remote DASD 44, respectively, then the back end 
service passes the session establishment request 
to the front end service (step 120), and waits for a 
return acknowledging session establishment with 
the network server (step 122). The front end ser- 
vice then determines if the session can be estab- 
lished (i.e. valid account and password, no other 
problems), and sends the response to the back end 
service. If the session is not successfully estab- 
lished (decision block 123), then the back end 
service sends an error message to the client via 
the front end service, refusing the session (step 
124). However, if the session is successfully estab- 
lished, then the back end service sends the entire 
client request including the session establishment 
request and the connect request to the one host 
computer which manages the resource for which 
connection is requested (step 130), and waits for a 
response (step 132). It should be noted that the 
form of the session establishment request and con- 
nect request sent to the host computer by the 
network server in step 130 can be the same as that 
sent to the network server by the client. However, it 
may be necessary to provide a mapping between 
user/client ID, resource connection ID and file ID 
between that provided by the network server and 


that required by the remote computer. When the 
response is received from the host computer in- 
dicating whether the session was established and 
the connection is available, the back end service 

5 stores an identifier for this host computer in the 
client control block (step 133), and passes the 
response to the front end service (step 134), then 
the front end service passes the response to the 
client via the network interface 52. The form of the 

w session establishment response originating from 
the host computer and sent to the client after step 
134 can be the same as that sent to the client after 
step 116 when there was no connect request to 
either host computer. If it is not identical, the net- 

15 work server alters the format suitably. Consequent- 
ly, the client does not know the origin of the 
session establishment response or connect re- 
sponse, and assumes that the client now has ac- 
cess to any resource available from the network 

20 server. To support this assumption, the network 
server, as described below, will subsequently re- 
quest session establishment on behalf of the client 
with any other remote computer connected to the 
network server when and if the client requests 

25 access to a resource managed by this other re- 
mote computer. The client need not request ses- 
sion establishment again during the course of the 
session that was just established after steps 120 
and 130. This makes the network server transpar- 

30 ent to the clients, yet there is no burden ever (for 
session establishment) on any host computer that 
does not manage a resource for which the client 
requests a connection. 

Subsequently, the client sends a request to the 

35 network server to access a named resource 
(assume the one for which a connect request was 
previously sent). The client need not know the 
location of the resource or computer which man- 
ages the resource, and does not specify the loca- 

40 tion in the request. The front end service receives 
the request via the network interface, and passes 
the request to the back end service (step 104). 
Because this request is a resource access request 
and not a session establishment request (decision 

45 block 106), the back end service next determines if 
the named resource is managed by either remote 
computer 30 or 34 (decision block 140). This deter- 
mination is made by reading the resource table 56. 
If the named resource is instead managed by net- 

50 work server 14 (for example, stored on local DASD 
24), then the back end service passes the request 
to the front end service for processing (step 116). 
For a read request, the front end service reads the 
directory from local DASD 24 into data buffer 69, 

55 and then sends the directory to the client for stor- 
age in the client's RAM. For a write request, the 
front end service writes the data supplied with the 
write command into data buffer 60 and then into 
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the directory within local DASD 24. Other types of 
requests are handled in an appropriate manner. 

Referring again to decision block 140, if the 
named resource is managed by either remote com- 
puter 30 or 34 (for example, stored on either re- 
mote DASD 40 or remote DASD 44), the back end 
service determines that a session was previously 
established and is currently active for this client 
with the host computer that manages the requested 
resource (decision block 142). This determination is 
made by reading the active session table 57. Then, 
the back end service sends the resource access 
request to the host computer (step 130) and then 
waits for a response (step 132). If the resource 
access request is a read request, then the host 
computer will read the resource from the remote 
DASD into host RAM, and send the resource to the 
data buffer 60, and the back end service will send 
the data to the client via the front end service (step 
134). If the resource access request is a write 
request, the host computer will write the data into 
the remote DASD, and respond to the client via the 
front end service with an acknowledgement in step 
134. 

The client can also send a request to connect 
to another resource which is managed by the (or 
any) other host computer. 

Referring again to decision block 142, if there 
is not yet a session established with this other host 
computer that manages the requested resource, 
then the back end service determines if session 
establishment data has been saved for this client 
by reading the session establishment data table 54 
(decision block 148). If not, (which means that 
there is not an active session with the network 
server), then the back end service responds to the 
client via the front end service with an error signal 
and refuses connection to the host computer (step 
124). (The client can now request a session estab- 
lishment, and the flow chart of Fig. 2 will proceed 
as described above for steps 104, 106, 110 etc.) 

Referring again to decision block 146, if the 
session establishment data has been saved for this 
client (meaning that there is currently an active 
session with at least the network server), the back 
end service builds a session establishment request 
based on the session establishment data stored in 
the table 54 and sends the request to this other 
host computer (step 152). It should be noted that in 
accordance with an object of the present invention, 
the client itself is not burdened with establishing a 
session with the host computer or even knowing 
that a host computer manages the requested re- 
source. It should also be noted that the back end 
service establishes sessions only with those host 
computer(s) that manage resources for which con- 
nection or access has been requested, and the 
other host computer(s) are not interrupted. This 


maximizes efficiency. 

After sending the session establishment re- 
quest, the back end service waits for a response 
(step 156) from the host computer. The host com- 

5 puter will then determine if the session should be 
established based on the account name, password 
and other information, and respond with a session 
establishment acknowledgement or refusal to the 
back end service. If the session with this client has 

ro been established (decision block 170), then the 
back end service will send the resource connection 
to the host computer (step 130), and then execute 
steps 132, 133 and 134 as described above. The 
client can then follow with a resource access re- 

is quest Referring again to decision block 1 70, if the 
host computer refuses to establish the session, 
then the back end service will pass the error mes- 
sage and refusal to the client via the front end 
service (step 124). 

20 Fig. 2()b illustrates another portion of the back 
end service program which handles requests to 
terminate sessions. The requests can originate 
from either a client 11a-z or be initiated by admin- 
istrative action on the network server (or indirectly 

25 by administrative action from the remote computer- 
(s)), and includes a session structure pointer pa- 
rameter. 

The front end service receives this request, 
passes this request to an entry point in the back 

30 end service program corresponding to step 200, 
and processes the deleted session with the client 
by ending all work in progress by that client, and 
performing any needed cleanup. Then, the back 
end service reads the session establishment data 

35 table 54 to determine which of the network server, 
host computer 30 and host computer 34 have 
established a session with the requesting client 
(step 202). If neither of the host computers 30 nor 
34 (nor any other host computer) has established a 

40 session with the requesting client (decision block 
204), then the back end service returns control to 
the front end service (step 206), which terminates 
its processing of this request. However, if either of 
the host computers 30 or 34 has established a 

45 session with the requesting client, then the back 
end service builds a session delete notification 
(step 208) and sends the notification to all host 
computers that have established a session with the 
requesting client (step 210). The session delete 

50 notification includes the host identifier parameter 
that was stored in step 133. 

The notified host computers proceed to delete 
the session by ending all work associated with the 
user and performing any needed cleanup, and then 

55 return acknowledgements to the back end service 
which is waiting (step 212). Then, the back end 
service returns control to the front end service, 
which terminates its processing of this request. 
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Figs. 3(a-d) illustrate operation of the network 
server 14 (including the back end service de- 
scribed above) and associated host computers 30 
and 34 in responding to five specific requests by 
one client 11a on network 13. In step 310, the 
client issues a bundled request for session estab- 
lishment and connection to a resource such as a 
directory that happens to reside in local DASD 24. 
The front end service passes the request to the 
back end service (step 312), the back end service 
stores the establishment data in step 110 and 
sends the request to the front end service in step 
116. Then the front end service establishes the 
session, processes the connect request, and noti- 
fies the back end service and the client of the 
session (step 314). Because the resource is not 
managed by either remote computer 30 or 34, the 
back end service does not attempt to establish a 
session with either remote computer 30 or 34. 

In step 320, the client subsequently issues a 
connect request for a resource such as a directory 
that happens to reside on remote DASD 40 which 
is managed by host computer 30. The front end 
service passes the request to the back end service 
(step 322), and the back end service performs 
steps 152 and 156 described above in which the 
back end service requests that a session be estab- 
lished with host computer 30 and then waits for the 
response. This is necessary because the resource 
resides on remote DASD 40, and the session es- 
tablished in step 314 was confined to the network 
server. The host computer establishes the session 
(step 324), and then the back end service performs 
steps 130 and 132 described above in which the 
back end service sends the connect request to the 
host computer and waits for the response. Then, 
the host computer processes the connect request 
and responds to the back end service with the 
result (step 326). Then, the back end service sends 
the response to the client via the front end service 
(step 134). 

In step 330, the client subsequently issues a 
request to connect to a second resource that hap- 
pens to reside also on remote DASD 40. The front 
end service passes the request to the back end 
service (step 332), and the back end service sends 
the connect request to the host computer 30 (step 
130). Because there is already a session estab- 
lished with host computer 30 for client 11a, it is not 
necessary to establish another session with host 
computer 30. Then the host computer 30 pro- 
cesses the connect request (step 334), and then 
the back end service returns the response to the 
client via the front end service (steps 1 32 and 1 34). 

In step 340, the client subsequently issues a 
request to connect to a resource that happens to 
reside on the other remote DASD 44 which is 
managed by host computer 34. The front end ser- 


vice passes the request to the back end service 
(step 342), and the back end service executes 
steps 152 and 156 described above in which the 
back end service requests a session with host 

s computer 34 for client 11a and then waits for a 
response. Then the host computer 34 establishes 
the session with the client 11a and responds with 
an acknowledgement (step 344). Such a session is 
necessary because the resource resides on remote 

jo DASD 44, and the sessions established earlier in 
steps 313 and 324 did not involve host computer 
34. Then, the back end service passes the connect 
request to the host computer 34 and waits for a 
response (steps 130 and 132), the host computer 

75 34 processes the request and returns a response 
(step 346). In step 134, the back end service for- 
wards the response to the client via the front end 
service. It should be noted that the session with 
host computer 34 was not established until the 

20 client requested a connection to DASD 44; this 
optimizes efficiency. 

In accordance with one object of the invention, 
an application program executing on the host com- 
puter 30 can access the same remote resource 

25 such as a directory on DASD 40 that the client can 
access. This is illustrated by step 346 in which a 
user application program 349 executing on host 
computer 30 (or coupled to the host computer 30 
via a communication facility not shown) makes a 

30 request to the host processor to link the application 
program to a minidisk portion of DASD 40. This 
linkage provides the application program with ac- 
cess by resource name to all the resources on the 
minidisk including the directory that was accessed 

35 by the client. Thus, the application program can 
now read from or write to the directory and any file 
therein stored on the minidisk by open, read, write 
or delete, close and other commands. 

In step 350, the client subsequently issues a 

40 request to terminate the session. It should be noted 
that the client need not know that sessions were 
established also with host computers 30 and 34. 
The front end service passes the request to the 
back end service (step 352), and the back end 

45 service executes steps 200-206 described above in 
which the back end service determines which host 
computers have an active session with this client, 
builds a session termination notification and sends 
it to each host computer which has an active ses- 

50 sion for this client. In this example, host computers 
30 and 34 currently have an active session with 
this client. Then, the host computers 30 and 34 
terminate their sessions with this client 11a (steps 
354 and 356). 

55 Figs. 4(a) and (b) illustrate operation of the 
network server 14 (including the back end service 
described above) and associated host computer 30 
in responding to three other specific requests by 
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one client 11a on network 12. In step 410, client 
11b, issues a bundled request for session estab- 
lishment and a connection to a resource that hap- 
pens to reside on DASD 40 which is managed by 
host computer 30. The front end service passes 
the. request to the back end service (step 412), and 
the back end service saves the session establish- 
ment data and returns control to the front end 
service (steps 110 and 120). Then the front end 
service establishes the session, transfers control to 
the back end service and notifies the back end 
service that the session has been established (step 
414). Next, the back end service executes steps 
122 and 130 described above in which the back 
end service requests a session with host computer 
30 for client 11b, and then host computer 30 estab- 
lishes the session with client 11b, processes the 
connect request, and returns the result of the con- 
nect request processing to the back end service 
(step 416). Then, the back end service returns the 
result to the client via the front end service (step 
134). 

In step 420, the client 11b issues a connect 
request within the same session that was estab- 
lished in step 414 for a resource that happens to 
reside within local DASD 24. The front end service 
passes the requests to the back end service (step 
422), and the back end service returns the request 
to the front end service because the request in- 
volves only local DASD 24 (step 116 described 
above). Then, the front end service processes the 
connect request (step 424). It is not necessary to 
establish any other sessions in view of the existing 
session with network server 1 4 for client 1 1 b. 

In step 430, the client 11b issues a request to 
terminate the session that was established in step 
414, and the front end service passes the request 
to the back end service (step 432). Then, the back 
end service determines that a session currently 
exists for this client with host computer 30, builds a 
session termination notification based on the client 
request, and sends the notification to host com- 
puter 30 (steps 202, 208 and 210). It is not neces- 
sary to send the notification to host computer 34 
because no session was previously established for 
client 11b on account of the requests made in Fig. 
4 (a) and (b). In step 434, the host computer 30 
terminates the session with client 11b. 

Figs. 5(a) and (b) illustrate operation of the 
network server 14 (including the back end service 
described above) and associated host computers 
30 and 34 in responding to three other specific 
requests by one client 11c on network 12. In step 
510, client 11c issues a session establishment re- 
quest to network server. The front end service 
passes the request to the back end service (step 
512), and the back end service saves the session 
establishment data and returns the request to the 


front end service (steps 110 and 116). Because 
there is no request to connect to a resource on 
either remote DASD (or any resource), it is not 
necessary for the back end service to pass any 

5 request to either host computer 30 or 34. In step 
514, the front end service establishes the session 
with client 11c, notifies the back end service of the 
session establishment, and returns a session estab- 
lishment notification to the client 11c. 

w In step 520, the client 11c sends a connect 
request to the network server for a resource that 
happens to reside on DASD 44 which is managed 
by host computer 34. The front end service passes 
the request to the back end service (step 524), and 

75 the back end service builds a session establish- 
ment request based on the data stored in the 
session establishment data table, and sends the 
request to host computer 34 (steps 152 and 156). 
In step 524, host computer 34 establishes the 

20 session with client 11c and returns an acknowl- 
edgement to the session establishment request. 
Because the connect request does not involve host 
computer 30, the client requests are not sent to 
host computer 30 and host computer 30 is not 

25 interrupted in any way. After receiving the re- 
sponse from the host computer 34, the back end 
service passes the connect request to host com- 
puter 34 and waits for a response (steps 130 and 
132). The host computer 34 processes the connect 

30 request and returns a response (step 524). The 
back end service forwards the response to the 
client via the front end service (step 1 34). 

In step 530, the client 11c issues a request to 
the network server to terminate the session. The 

35 front end service passes the request to the back 
end service (step 532), and the back end service 
determines that host computer 30 has established 
a session with the client 11c, builds a session 
termination notification and sends it to the host 

40 computer 34. Because the host computer 30 was 
never involved with the client request of Fig. 5, the 
back end service does not send the session ter- 
mination notification to host computer 30. In step 
534, the host computer 34 terminates the session 

45 with client 11c. 

The following is a detailed description of the 
channels 32 and 36, and the PCA card 28, al- 
though the present invention does not depend on 
the specific type of communication facilities which 

so are utilized. 

Each of the host computers 630 and 634 in- 
cludes a host processor 670 and 674, a main 
memory 680 and 684, a "Blue" bus 690 and 694 
servicing the host processor, the main memory, the 

55 Block Multiplexor channel 632 and 636, and DASD 
controllers 697 and 699 respectfully. DASD control- 
lers 697 and 699 control the reading from and 
writing to the remote DASD 640 and 644 respec- 
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tively, and are well known in the art. 

Each channel includes a host port, a buffer 
memory to temporarily store all data transferred 
between the Blue bus and the host port, and a 
channel processor to control the data transfer from 
the main memory to the host port via the buffer 
memory. The channel relieves the host processor 
of the burden of transferring data between the main 
memory of the host computer and the host port, 
and once called by the host processor, is indepen- 
dent of the host processor. 

To initiate a data transfer from the main mem- 
ory to the host port, the host processor (under the 
direction of a host control program) builds a chan- 
nel program including a sequence of channel com- 
mand words (CCWs), and stores a channel address 
word at a predetermined location. The channel 
address word points to the first CCW in the chan- 
nel program. Each CCW includes a command such 
as read or write, a byte length indicating the length 
of data to be read or written, and a pointer to the 
first location in main memory to store the data to 
be read in the case of a read CCW, or the first 
location of the data to be written in the case of a 
write CCW. The, the host processor issues a Start 
I/O command which addresses the target device, in 
this case, the channel. 

The channel processor receives the Start I/O 
command and fetches the first CCW. Pursuant to a 
single write CCW, the channel processor fetches a 
block of data from (host) main memory at a loca- 
tion indicated by the pointer and copies the data 
into the channel buffer memory. Next, the channel 
processor dispatches another task which executes 
on the channel processor to begin the transfer to 
the PC A card of the block of data that was recently 
copied into the channel buffer memory. Then, the 
channel processor processes subsequent write 
CCWs, if any, by fetching the corresponding blocks 
of data from the main memory and copying the 
data into the channel buffer memory. 

The channel is corrected to the PCA card 628 
by an IBM Bus and Tag cable. The Bus and Tag 
cable includes many parallel coaxial conductors to 
transmit data, address and control signals in par- 
allel. 

As illustrated in Fig. 6, the PCA card includes 
an Intel 80C186 microprocessor ("PCA processor") 
642 and a shared RAM 44. The PCA processor 42 
as well as the PS/2 processor 618 and channel 
state machine 48 (within the PCA card) can all 
directly access shared RAM 44 (with permission by 
arbiter 50). Shared RAM 44 includes a communica- 
tion area for communication between the PS/2 pro- 
cessor 618 executing PCA driver code 630 and the 
PCA processor 642, and the transmit and receive 
data buffers to temporarily store all data transferred 
between a Micro Channel (R) bus associated with 


the PS/2 processor and the channel, a multiplexor 
47 is located between shared RAM 44 and the 
Micro Channel (R) bus control logic 45 provides 
hand-shaking for the Micro Channel (R) bus and 

5 address latching for addresses supplied to the 
Micro Channel (R) bus. Channel state machine 48 
provides channel protocol and control sequences 
for communication with the channel. Arbiter 50 
arbitrates access to shared RAM 44 between the 

w Micro channel (R) bus, the channel state machine 
48, and the PCA processor 42. A program RAM 56 
stores PCA processor microcode, and channel sta- 
tus and device information, and forms a command 
FIFO and a status FIFO described below. 

75 Channel interface logic or remote port 57 in- 

cludes drivers and receivers for interfacing to chan- 
nel bus and tag fines. Micro Channel (R) interface 
logic 41 includes the multiplexer 47 and latches for 
interfacing to address and data lines on the Micro 

20 Channel (R) bus. 

The following procedure is used to transfer 
data from the data buffer 669 of the PS/2 processor 
to the RAM 680 or 684 of the host processor with 
initiation from the PS/2 processor. First, the PS/2 

25 processor obtains access to RAM 44 with permis- 
sion from arbiter 50 in order to read a list in RAM 
44 of available transmit data buffers. Neither the 
System/370 processor nor the channel participates 
in the decision where to store the data in RAM 44. 

30 Then, the PS/2 processor writes the data into an 
available data buffer in RAM 44. Next, the PS/2 
processor sends a write command message with 
device address, buffer address and transfer size to 
the PCA processor 42 via the communication area 

35 in the shared RAM. The PCA processor processes 
the write command by setting up control param- 
eters, i.e. attention status, buffer address, and 
transfer size in the program RAM table. The PCA 
processor then writes the device address corre- 

40 sponding to the channel into the command FIFO. 
The channel state machine 48 reads out the device 
address from the command FIFO and sends the 
attention status to the channel. The channel then 
interrogates the write command pending on the 

45 PCA card. Because of the channel protocol, the 
PCA will not send the data until a matching (read) 
command is received from the channel. 

The channel subsequently responds to the 
write command from the PS/2 processor with a 

so read command. The channel state machine match- 
es the channel read command with the PS/2 write 
command and notifies the channel state machine of 
the match. Then, the channel state machine sets 
up the data buffer addresses and length count and 

55 controls the data transfer from the RAM 44 to the 
channel. Upon completion of the data transfer to 
the channel, the channel state machine writes an 
entry in the status FIFO to notify the PCA proces- 
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sor that the write operation has been completed. 

The following procedure is used to transfer 
data from the data buffer 669 of the PS/2 processor 
to the RAM 680 or 684 of the host processor with 
initiation by the host processor. The host processor 
builds a channel program which includes a read 
CCW, and issues the Start I/O command to the 
channel. The channel fetches the read CCW, and 
sends a read command to the PCA card. Assuming 
that data is not waiting in the PCA buffer for 
transmission to the channel, the channel state ma- 
chines 48 will return "command retry status" to 
notify the host processor that the data is not imme- 
diately available. After returning the command retry 
status, the channel state machine 48 writes an 
entry in the status FIFO to notify the PCA proces- 
sor of the read command received from the chan- 
nel. In response, the PCA processor notifies the 
PS/2 processor about the read command. When 
the PS/2 processor has data to send to the host 
processor, the PS/2 identifies an available buffer in 
RAM 44, and writes the data into the available 
buffer. Then, the PS/2 processor writes a message 
into the shared communication area of RAM 44 to 
notify the PCA processor of the existence and 
location of the data. In response, the PCA proces- 
sor makes an entry into the command FIFO to 
notify the channel state machine of the write com- 
mand from the PS/2 processor and the target de- 
vice address. The channel state machine sends a 
"data ready" status signal to the channel, and the 
channel responds with the read command again. 
Finally, the channel state machine 48 controls the 
data transfer from the transmit buffer in RAM 44 to 
the channel buffer. 

The following procedure is used to transfer 
data from the RAM 680 or 684 of the channel to 
the data buffer 669 of the PS/2 processor with 
initiation from the host processor. The host proces- 
sor builds a channel program which includes a 
write CCW, and issues the Start I/O to the channel. 
The channel fetches the write CCW and corre- 
sponding data from the main memory, and stores 
the data in the channel data buffer. Then, the 
channel sends to the PCA card a corresponding 
write command. The channel state machine 48 
obtains a data buffer from the shared RAM 44 by 
reading the list of available data buffers. (In the 
PCA system, it is not necessary to interrupt the 
PS/2 processor at this time.) Neither the 
System/370 processor nor the channel participates 
in the decision where to store the data in RAM 44. 
Then the channel state machine 48 controls the 
data transfer from the channel to the shared "RAM 
with the channel responding to control sequences 
established by the state machine 48. Upon comple- 
tion, the channel state machine writes an entry into 
the status FIFO to notify the PCA processor about 


the receipt of the data from the channel and the 
location and length of the data in he receive buffer 
in RAM 44. The PCA processor reads out the entry 
from the status FIFO and then notifies the PS/2 
5 processor via the communication area in the 
shared RAM. The PS/2 processor finally moves the 
data from the shared RAM into the PS/2 system 
RAM. 

The PS/2 processor can also initiate transfer of 

10 data from RAM 680 or 684 of the host processor to 
the data buffer 669 of the PS/2 processor. First, the 
PS/2 processor obtains access to RAM 44 (with 
permission from arbiter 50) in order to read the list 
of available receive data buffers. Then, the PS/2 

75 processor sends a read command message with 
device address, buffer address and transfer size to 
the PCA processor 42 via the communication area 
in the shared RAM. The PCA processor processes 
the read command by setting up control param- 

20 eters, i.e. attention status, buffer address, and 
transfer size, in the program RAM table. The PCA 
processor then writes the device address corre- 
sponding to the channel into the command FIFO. 
' The channel state machine 48 reads out the device 

25 address from the channel FIFO and sends the 
attention status to the channel. The channel then 
interrogates the read command pending on the 
PCA card. The channel subsequently responds to 
the read command with a write command. The 

30 channel state machine matches the channel write 
command with the PS/2 read command. Then, the 
channel state machine sets up the data buffer 
addresses and length count and control the data 
transfer from the channel to the RAM 44. Upon 

35 completion of the data transfer from the channel, 
the channel state machine writes an entry in the 
status FIFO to notify the PCA processor that the 
read operation has been completed. 

Instead of using the PCA driver 630, PCA card 

40 28 and channels 32 and 36, the following commer- 
cially available software and hardware can be used 
to provide two alternate configurations. An IBM 
Personal Workstation Communication Services/VM 
program can execute on the processor .18 to inter- 
ns face processor 18 and data buffer 69 to an IBM 
Token-Ring Network 16/4 Adapter/A (IBM part 
number 74F9410) which is located at the network 
server. The Token-Ring Network 16/4 Adapter/A is 
coupled to an IBM Integrated LAN adapter (IBM 

so part number 6134 for an ES/9000 type of host 
computer and part number 6034 for a 9370 type of 
host computer) which is located at the host com- 
puter and interfaces to the host processor. 

Alternately, the IBM VM Personal Workstation 

55 Communication Services (PWSCS) program ex- 
ecutes on the processor 18 to interface processor 
18 and data buffer 69 to an IBM Channel 
Emulator/A card (IBM part number 1674899) which 
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is located at the network server. AN IBM 3088 
multisystem channel communication unit intercon- 
nects the Channel Emulator/A card to the Block 
Multiplexor channel of the host computer. Other 
connectivities are also available with PWSCS pro- 
gram. 

Based on the foregoing, a network server ac- 
cording to the present invention has been dis- 
closed. However, numerous modifications and sub- 
stitutions can be made without deviating from the 
scope of the present invention. For example, dif- 
ferent type of networks, i.e. different clients and 
different network communication links, can be 
served by the network server, and the network 
server can interface to different types of remote 
computers. Also, the files can be stored on other 
types of repositories. Therefore, the invention has 
been disclosed by way of illustration and not limita- 
tion, and reference should be made to the following 
claims to determine the scope of the present inven- 
tion. 

Claims 

1. A method for managing access by clients in a 
network to one or more local resources man- 
aged by a network server and one or more 
remote resources managed by one or more 
respective remote computers logically and/or 
physically coupled to the network server, said 
method comprising the steps of: 
sending from one of said clients to said net- 
work server a request to establish a session 
and a request to connect to or access a first 
resource, wherein said requests are preferably 
provided by a single request, said session 
establishment request including an account 
name and password for said one client; 
in response to the session establishment re- 
quest, establishing by said network server a 
session between said network server and said 
client, and storing said account name and 
password; 

in response to the request to connect to or 
access said first resource, determining that 
said first resource is managed by said network 
server, and determining if said connection is 
available to said first resource; 
subsequently, sending from said one client to 
said network server a request to connect to or 
access a second resource; and 
in response to said subsequent request to con- 
nect to or access said second resource, deter- 
mining by said network server that one of said 
remote computers manages said second re- 
source, sending a request by said network 
server to said one remote computer to estab- 
lish a session with said one remote computer, 


said request including said stored account 
name and password, and sending a request by 
said network server to said one remote com- 
puter to connect to or access said second 
5 named resource. 

2. Method as set forth in claim 1 further compris- 
ing the subsequent steps of: 

sending from said one client to said network 
w server a request to connect to or access a 

third resource; 

determining by said network server that an- 
other one of said remote computers manages 
said third resource; and 

75 sending by said network server to said other 

remote computer a request to establish a ses- 
sion, said session establishment request in- 
cluding said stored account name and pass- 
word, and a request to connect to or access 

20 said third resource. 

3. Method as set forth in claim 1 or 2 further 
comprising the steps of: 

validating by said one remote computer said 
25 account name and password included in said 
session establishment request, and 
establishing by said one remote computer said 
session requested by said network server. 

30 4. Method as set forth in claim 3 further compris- 
ing the steps of: 

sending from said one client to said network 
server a request to terminate said session; 
determining by said network server that said 
35 one remote computer is involved in said ses- 

sion; 

sending by said network server to said one 
remote computer a request to terminate said 
session requested by said network server; and 
40 terminating by said network server the session 

between said network server and said one 
client. 

5. Method as set forth in claim 1 or one of the 
45 claims 2 to 4, further comprising the steps of: 

after said subsequent request, making a re- 
quest by another application program execut- 
ing within said one remote computer to access 
said second resource; and 
50 pursuant to said application program request 

by said other application program, providing 
access by said one remote computer to said 
other application program to said second re- 
source. 

55 

6. Method as set forth in claim 1 or one of the 
claims 2 to 5, wherein the subsequent connect 
or access request sent by said one client to 
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said network server specifies said second re- 
source by name, but does not specify said one 
remote computer or location of said second 
resource. 

5 

A method for managing access by clients in a 
network to a local resource managed by a 
network server and one or more remote re- 
sources managed by one or more respective 
remote computers logically and/or physically ro 
coupled to the network server, said method 
comprising the steps of: 
sending from one of said clients to said net- 
work server a request to establish a session 
and a request to connect to or access a first 15 
resource, wherein said requests are preferably 
provided by a single request, said session 
establishment request including an account 
name and a password for said one client; 
in response to the session establishment re- 20 
quest, establishing by said network server a 
session with said network server, and storing 
said account name and password; 
in response to the connect or access request, 
determining that one of said remote computers 25 
manages said first resource, sending a request 
by said network server to said one remote 
computer to establish a session with said one 
remote computer, said request including said 
stored account name and password, and send- 30 
ing a request by said network server to said 
remote computer to connect to or access said 
first resource; 

subsequently, sending from said one client to 
said network server a request to connect to or 35 
access a second resource; and 
in response to said subsequent request, deter- 
mining that said network server manages said 
second resource, and determining whether 
said second resource is available. 40 

Method as set forth in claim 7 further compris- 
ing the step of establishing said session with 
said one remote computer by said one remote 
computer validating said account name and 45 
password, in response to said session estab- 
lishment request from said network server. 

A network server for managing access by cli- 
ents in a network to one or more local re- 50 
sources managed by the network server and 
one or more remote resources managed by 
one or more respective remote computers logi- 
cally and/or physically coupled to the network 
server, said network server comprising: 55 
means for receiving from one of said clients on 
said network a request to establish a session 
and a request to connect to or access a first 


resource, wherein said requests are preferably 
provided by a single request, the session es- 
tablishment request including an account name 
and password for said one client; 
means, responsive to the session establish- 
ment request, for establishing a session be- 
tween said network server and said one client, 
and storing said account name and password; 
means, responsive to the request to connect to 
or access said first resource, for determining 
that said first resource is managed by said 
network server, and determining if said con- 
nection is available to said first resource; and 
means, responsive to a subsequent request 
from said one client to connect to or access a 
second resource, for determining that one of 
said remote computers manages said second 
resource, sending a request to said one re- 
mote computer to establish a session with said 
one remote computer, said request including 
said stored account name and password, and 
sending a request to said one remote com- 
puter to connect to or access said second 
resource. 

10. Network server as set forth in claim 9 wherein: 
the determining means is responsive to an- 
other request from said one client to connect 
to or access a third resource to determine that 
another one of said remote computers man- 
ages said third resource; and 

the sending means sends to said other remote 
computer a request to establish a session, said 
session establishment request including said 
stored account name and password, and a 
request to connect to or access said third 
resource. 

11. Network server as set forth in claim 9 or 10 
further comprising: 

means, responsive to a request from said one 
client to terminate said session, for determin- 
ing that said one remote computer is involved 
in said session; 

means for sending to said one remote com- 
puter a request to terminate said session re- 
quested by said network server; and 
means for terminating the session between 
said network server and said one client. 

12. Network server as set forth in claim 9, 10 or 1 1 
wherein the subsequent connect or access re- 
quest sent by said one client to said network 
server specifies said second resource by 
name, but does not specify said one remote 
computer or a location of the resource man- 
aged said one remote computer. 
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13- A network server for managing access by cli- 
ents in a network to a local resource managed 
by the network server and one or more remote 
resources managed by one or more respective 
remote computers coupled to the network 
server, said network server comprising: 
means for receiving from one of said clients on 
said network a request to establish a session 
and a request to connect to or access a first 
resource, the session establishment request 
including an account name and a password for 
said one client; 

means, responsive to the session establish- 
ment request, for establishing a session with 
said network server, and storing said account 
name and password; 

means, responsive to the connect or access 
request, for determining that one of said re- 
mote computers manages said first resource, 
sending a request to said one remote com- 
puter to establish a session with said one 
remote computer, said request including said 
stored account name and password, and send- 
ing a request to said remote computer to con- 
nect to or access said first resource; and 
means, responsive to a subsequent request to 
connect to or access a second resource, for 
determining that said network server manages 
said second resource, and determining wheth- 
er said second resource is available. 

14. A computer program product for managing ac- 
cess by clients in a network to one or more 
local resources managed by the network serv- 
er and one or more remote resources man- 
aged by one or more respective remote com- 
puters logically and/or physically coupled to 
the network server, said computer program 
product comprising: 
a computer readable medium; 
first program instruction means, recorded on 
said medium, for instructing a computer pro- 
cessor to receive from one of said client or 
said network a request to establish a session 
and a request to connect to or access a first 
resource, the session establishment request 
including an account name and password for 
said one client; 

second program instruction means, recorded 
on said medium, for instructing a computer 
processor to respond to the session establish- 
ment request by establishing a session be- 
tween said network server and said client, and 
storing said account name and password; 
third program instruction means, recorded on 
said medium, for instructing a computer pro- 
cessor to respond to the request to connect to 
or access said first resource, by determining 


that said first resource is managed by said 
network server, and determining if said con- 
nection is available to said first resource; and 
fourth program instruction means, recorded on 

5 said medium, for instructing a computer pro- 

cessor to respond to a subsequent request 
from said one client to connect to or access a 
second resource, by determining that one of 
said remote computers manages said second 

10 resource, sending a request to said one re- 

mote computer to establish a session with said 
one remote computer, said request including 
said stored account name and password, and 
sending a request to said one remote com- 

75 puter to connect to or access said second 

resource; and 

wherein each of said program instruction 
means is executable by the associated com- 
puter processor. 

20 

15. Computer program product as set forth in 
claim 14 wherein 

to the third program instruction means is re- 
sponsive to another request from said one 

25 client to connect to or access a third resource 

by instructing a computer processor to deter- 
mine that another one of said remote comput- 
ers manages said third resource; and 
the fourth program instruction means instructs 

30 a computer processor to send to said other 

remote computer a request to establish a ses- 
sion, said session establishment request in- 
cluding said stored account name and pass- 
word, and a request to connect to or access 

35 said third resource. 

16. Computer program product as set forth in 
claim 14 or 15 further comprising: 

fifth program instruction means, recorded on 
40 said medium, for instructing a computer pro- 

cessor to respond to a request from said one 
client to terminate said session, to determine 
that said one remote computer is involved in 
said session; 

45 sixth program instruction means, recorded on 

said medium, for instructing a computer pro- 
cessor to send to said one remote computer a 
request to terminate said session requested by 
said network server; and 

so seventh program instruction means, recorded 

on said medium, for instructing a computer 
processor to terminate the session between 
said network server and said one client; and 
wherein said fifth, sixth and seventh program 

55 instruction means are executable by the asso- 

ciated computer processor. 
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26 


17. Computer program product as set forth in 
claim 14, 15 or 16 wherein the subsequent 
connect or access request sent by said one 
client specifies said second resource by name. 

but does not specify said one remote com- s 
puter or an address of the resource managed 
said one remote computer. 

18. A computer program product for managing ac- 
cess by clients in a network to a local resource 10 
managed by the network server and one or 
more remote resources managed by one or 
more respective remote computers coupled to 

the network server, said computer program 
product comprising: 75 
first program instruction means, recorded on 
said medium, for instructing a computer pro- 
cessor to receive from one of said clients on 
said network a request to establish a session 
and a request to connect to or access a first 20 
resource, the session establishment request 
including an account name and password for 
said one client; 

second program instruction means, recorded 
on said medium, for instructing a computer 25 
processor to respond to the session establish- 
ment request by establishing a session with 
said network server, and storing said account 
name and password; 

third program instruction means, recorded on 30 
said medium, for instructing a computer pro- 
cessor to respond to the connect or access 
request by determining that one of said remote 
computers manages said first resource, send- 
ing a request to said one remote computer to 35 
establish a session with said one remote com- 
puter, said request including said stored ac- 
count name and password, and sending a re- 
quest to said remote computer to connect to or 
access said first resource; and 40 
fourth program instruction means, recorded on 
said medium, for instructing a computer pro- 
cessor to respond to a subsequent request to 
connect to or access a second resource by 
determining that said network server manages 45 
said second resource, and determining wheth- 
er said second resource is available; and 
wherein 

each of said program instruction means is ex- 
ecutable by the associated computer proces- so 
sor. 
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